Pattern based behavior model for system management

ABSTRACT

An approach for providing guidance and management of a data processing system. A processor stores at least one design pattern corresponding to a plurality of components of the data processing system. A processor generates a behavioral model of the data processing system based, at least in part, on the stored at least one design pattern. A processor monitors actual behavior of the data processing system. A processor compares the actual behavior of the data processing system to the behavioral model of the data processing system. A processor recommends a solution, based, at least in part, on the comparison.

BACKGROUND OF THE INVENTION

The present invention relates generally to the field of data processingsystem management, and more particularly to create a pattern basedbehavioral model to provide guidance regarding the design, integration,and management of data processing systems.

Information technology (IT) is the application of computers andtelecommunications equipment to store, retrieve, transmit and manipulatedata—often in the context of a business or other enterprise. The terminformation technology is commonly used as a synonym for computers andcomputer networks, but the term also encompasses other informationdistribution technologies, such as television and telephones. Severalindustries are associated with IT, including computer hardware;software; electronics; semiconductors; Internet; telecom equipment;e-commerce; and computer services.

A data processing system is a combination of machines and people that,for a set of inputs, produces a defined set of outputs. The inputs andoutputs are interpreted as data, facts, information, etc., depending onthe interpreter's relation to the system. A common synonymous term isinformation system. A data processing system may involve somecombination of: converting data to another format; ensuring thatsupplied data is clean, correct and useful; arranging items in somesequence and/or in different sets; reducing detail data to its mainpoints; combining multiple pieces of data; the collection, organization,analysis, interpretation and presentation of data; and listing detailsof summary of data or computed information.

The end-to-end principle is a classic design principle in computernetworking and states that in a general-purpose network,application-specific functions ought to reside in the end hosts of anetwork, rather than in intermediary nodes, provided that the functionscan be implemented completely and correctly in the end hosts. Theprinciple's fundamental notion is that the payoffs from adding functionsto a simple network quickly diminish, especially when the end hosts haveto re-implement the functions for reasons of completeness andcorrectness. Furthermore, as implementing any specific function incurssome resource penalties, regardless of whether the function is used ornot, implementing a specific function in the network distributes thepenalties among all clients, regardless of whether a client uses thatfunction or not.

SUMMARY

Aspects of an embodiment of the present invention disclose a method,computer program product, and computer system for providing guidance andmanagement of a data processing system. A processor stores at least onedesign pattern corresponding to a plurality of components of the dataprocessing system. A processor generates a behavioral model of the dataprocessing system based, at least in part, on the stored at least onedesign pattern. A processor monitors actual behavior of the dataprocessing system. A processor compares the actual behavior of the dataprocessing system to the behavioral model of the data processing system.A processor recommends a solution, based, at least in part, on thecomparison.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 depicts a block diagram of a computing system, in accordance withan embodiment of the present invention.

FIG. 2 depicts a flowchart of the steps of a design pattern function,executing within the computing system of FIG. 1, for creating andstoring design patterns, in accordance with an embodiment of the presentinvention.

FIG. 3 depicts a flowchart of the steps of a matching function,executing within the computing system of FIG. 1, for matching knownpatterns with system data to describe the system based on identified andmatched patterns, in accordance with an embodiment of the presentinvention.

FIG. 4 depicts a flowchart of the steps of a comparison function,executing within the computing system of FIG. 1, for comparing theactual behavior of the system to the pattern based behavioral model tomonitor for behavior not in line with the pattern based behavioralmodel, in accordance with an embodiment of the present invention.

FIG. 5 depicts a block diagram of components of the server and thecomputing device, in accordance with an embodiment of the presentinvention.

DETAILED DESCRIPTION

In the current state of data processing system management, in manyindustries, an organization has multiple systems that run theorganization's business. The systems are set up over time, typicallywithout thought to the end to end effectiveness of the organization. Asthe number of systems increase, many organizations find it necessary tospend an increasingly higher proportion of the organization's revenue onthe maintenance of the systems. Part of the problem is the organizationshave no definition of how the systems work and interact together.Embodiments of the present invention recognize the organizations need tobe able to identify the systems possessed, how the systems are behaving,and how the systems can be analyzed and improved.

Monitoring systems have been created to take a model of systems and howthey are connected together. The monitoring systems map and log recordsfrom the components within the systems to the model. Thus, an operatoris able to understand the alerts and errors being generated in thecontext of the interconnected systems. The monitoring approach createscontext around the logging information coming from eachsystem/component, making it possible to understand potential cause andeffect and trace back to the root cause of a problem. Unfortunately, themonitoring systems do not understand the design intent of the end-to-endoperation of the connected IT systems. Rules can be coded into themonitoring tool, so that a certain error can be identified as having aprobable cause and consequence. However, coding rules does not create asystematic coverage of the end-to-end behavior.

Embodiments of the present invention recognize that what is needed is anoverlay model that defines the end-to-end design intent of theinterconnected systems and the emergent properties. Emergent propertiesare behaviors that emerge as a consequence of the way components/systemsare connected together over and above the inherent properties of eachindividual component. Emergent properties often relate to non-functionalrequirements, such as system latency, reliability, and flexibility—eachcritical to the successful running of the end-to-end IT landscape.Embodiments of the present invention is focused on providing anadditional behavioral layer to the monitoring. Providing this additionalbehavioral layer to the monitoring brings additional benefits to theorganizations.

Data processing system, information system, and IT system will be usedinterchangeably. Additionally, pattern model and pattern basedbehavioral model will be used interchangeably.

Embodiments of the present invention will now be described in detailwith reference to the Figures.

FIG. 1 depicts a block diagram of computing system 10, in accordancewith one embodiment of the present invention. FIG. 1 provides anillustration of one embodiment and does not imply any limitations withregard to the environments in which different embodiments may beimplemented.

In the depicted embodiment, computing system 10 includes server 30 andcomputing device 40 interconnected over network 20. Network 20 may be alocal area network (LAN), a wide area network (WAN) such as theInternet, a cellular data network, any combination thereof, or anycombination of connections and protocols that will supportcommunications between server 30 and computing device 40, in accordancewith embodiments of the invention. Network 20 may include wired,wireless, or fiber optic connections. Computing system 10 may includeadditional computing devices, servers, or other devices not shown.

Server 30 may be a management server, a web server, or any otherelectronic device or computing system capable of processing programinstructions and receiving and sending data. In some embodiments, server30 may be a laptop computer, tablet computer, netbook computer, personalcomputer (PC), a desktop computer, or any programmable electronic devicecapable of communicating with computing device 40 via network 20. Inother embodiments, server 30 may represent a server computing systemutilizing multiple computers as a server system, such as in a cloudcomputing environment. In another embodiment, server 30 represents acomputing system utilizing clustered computers and components to act asa single pool of seamless resources. Server 30 contains behavioral modelprogram 110, design pattern function 120, matching function 130,comparison function 140, and behavioral model database 150. Server 30may include components, as depicted and described in further detail withrespect to FIG. 5.

Computing device 40 may be a desktop computer, laptop computer, netbookcomputer, or tablet computer. In general, computing device 40 may be anyelectronic device or computing system capable of processing programinstructions, sending and receiving data, and communicating with server30 via network 20. Computing device 40 contains user interface 160.Computing device 40 may include components, as depicted and described infurther detail with respect to FIG. 5.

User interface 160 may be any user interface used to access informationfrom server 30, such as information gathered and produced by behavioralmodel program 110. In some embodiments, user interface 160 may be ageneric web browser used to retrieve, present, and traverse informationresources from the Internet. In other embodiments, user interface 160may be a software program or application that enables a user atcomputing device 40 to access server 30 over network 20. In the depictedembodiment, user interface 160 resides on computing device 40. In otherembodiments, user interface 160, or similar user interfaces, may resideon another computing device, another server, or server 30, provided thatuser interface 160 is accessible to behavioral model program 110.

Behavioral model program 110 operates to create a pattern basedbehavioral model to provide guidance to the management of dataprocessing systems. In doing so, behavioral model program 110 createsand stores design patterns. Behavioral model program 110 receives systeminformation, matches system information to known patterns, and generatesa pattern based behavior model. Behavioral model program 110 monitors adata processing system and compares the actual behavior of the system tothe pattern based behavioral model. Behavioral model program 110recommends solutions when the actual behavior of the system differs fromthe pattern based behavior model. In the depicted embodiment, behavioralmodel program 110 resides on server 30. In other embodiments, behavioralmodel program 110 may reside on another server, computing device, orcomputing device 40, provided that behavioral model program 110 canaccess behavioral model database 150 and user interface 160.

Design pattern function 120 operates to create and store designpatterns. The design patterns created and stored may be used by matchingfunction 130 to help generate a pattern based behavioral model. In thedepicted embodiment, design pattern function 120 is a function ofbehavioral model program 110. In other embodiments, design patternfunction 120 may be a separate program accessible by behavioral modelprogram 110.

Matching function 130 operates to match known patterns with system datato describe the system based on identified and matched patterns. Thesystem data is annotated and used to create a pattern based behavioralmodel. In the depicted embodiment, matching function 130 is a functionof behavioral model program 110. In other embodiments, matching function130 may be a separate program accessible by behavioral model program110.

Comparison function 140 operates to compare the actual behavior of thesystem to the pattern based behavioral model, monitoring for behaviornot in line with the pattern based behavioral model. Comparison function140 recommends solutions to problems found in the system. In thedepicted embodiment, comparison function 140 is a function of behavioralmodel program 110. In other embodiments, comparison function 140 may bea separate program accessible by behavioral model program 110.

Behavioral model database 150 may be a repository that may be writtenand/or read by behavioral model program 110. In some embodiments,behavioral model database 150 is a database that merely storesinformation. In other embodiments, behavioral model database 150 is aknowledge base that is governed by an ontology. A knowledge base is atechnology used to store complex structured and unstructured informationused by a computer system. A knowledge-based system consists of aknowledge base that represents facts and an inference engine that canreason about those facts and use rules and other forms of logic todeduce facts or highlight inconsistencies. In some embodiments,information stored in a knowledge base may include: function categories;descriptions; services; service functions; capabilities andconfigurations; and WordNet (a lexical database for the Englishlanguage). An ontology is a formal, explicit specification of a sharedabstract simplified view of some selected part of the world, containingthe objects, concepts, and other entities that are presumed of interestfor some particular purpose and the relationships between them.

In some embodiments, an ontology may use the information stored in aknowledge base to form and identify the relationships between differentservices. In some embodiments, a program (not shown) may allow a webdeveloper, administrator, or other user to define previously founddesign patterns and store to behavioral model database 150. Designpatterns describe the best practices for a creative discipline. Designpatterns were first used for building architecture and have morerecently been used by the information technology (IT) industry fordescribing best practices around hardware and software. An individualdesign pattern describes a common problem, a solution to that problem,and benefits and liabilities associated with using the solution. Thesolution is defined in terms of a collection of connected components. Acomponent is a piece of hardware of software that has an interface. Acomponent model is a definition of the way a set of components have beenconnected together. Not all combinations of components are as good asothers, and different combinations of components achieve differentresults. In some embodiments, pattern languages are stored to behavioralmodel database 150.

A collection of design patterns that relate to the same topic and linkto one another is called a pattern language. Pattern languagestraditionally use textual descriptions for the patterns and are focusedon human consumability rather than machine consumability. The termconsumability refers to a client's complete experience with a technologysolution, beginning with buying the right product to updating.Consumability also includes issues related to acquiring the product,installing and configuring the product, using the product, andtroubleshooting problems that arise over the long term. A good patternlanguage has a formal metamodel that defines the types of components andthe legal ways that these components can be connected together. Many ofthe patterns can be used as components in higher-level patterns. In thedepicted embodiment, behavioral model database 150 resides on server 30.In other embodiments, behavioral model database 150 may reside onanother server, computing device, or computing device 40, provided thatbehavioral model database 150 is accessible to behavioral model program110.

FIG. 2 depicts a flowchart of the steps of a design pattern function,executing within the computing system of FIG. 1, in accordance with anembodiment of the present invention. Design pattern function 120operates to create and store design patterns, in accordance with oneembodiment of the present invention.

In step 210, design pattern function 120 creates design patterns. Insome embodiments, design pattern function 120 creates design patterns.In other embodiments, design pattern function 120 creates, modifies,merges, or deletes design patterns. In some embodiments, design patternsmay be established by a user through a user interface, such as userinterface 160. The design pattern may be represented as a set of textdescriptions and a metamodel. In some embodiments, the metamodel may bedefined in the web ontology language (OWL). In other embodiments, thedesign pattern may be defined as a graph or tree with a metamodel. Inother embodiments, design patterns may be established through anautomated process. During this automated process, design patternfunction 120 receives system information and creates design patternsbased on the system information received. The design patterns createdinclude solutions to common problems in the form of a collection ofcomponents connected together in a particular way. A component is apiece of hardware or software that has an interface. A component modelis a definition of the way a set of components have been connectedtogether. Not all combinations are as good as others, and differentcombinations of components achieve different results.

In step 220, design pattern function 120 stores design patterns to arepository, such as behavioral model database 150. In some embodiments,design pattern function 120 may generate one or more reports thatinclude a description of a common problem, a solution to that problem,and benefits and liabilities of using the solution. In otherembodiments, design pattern function 120 may store the informationgathered. Still, in some embodiments, generated reports, or informationobtained, are stored to behavioral model database 150, for later use bybehavioral model program 110; matching function 130; comparison function140; an organization's IT personnel; and/or users accessing server 30through user interface 160 on computing device 40.

As more and more design patterns are stored in behavioral model database150, pattern languages are formulated. A pattern language is acollection of design patterns that relate to the same topic and link toone another. Pattern languages traditionally use textual descriptionsfor the patterns and are focused on human consumability rather thanmachine consumability. A good pattern language has a metamodel thatdefines the types of components and the legal ways the components can beconnected together. Many of the patterns can be used as components inhigher-level patterns.

A metamodel is a model of a model, and metamodeling is the process ofgenerating such metamodels. A metamodel is a simplified model of anactual model of a circuit, system, or software-like entity and can be amathematical relation or algorithm representing input and outputrelations. Metamodeling is the analysis, construction, and developmentof the frames, rules, constraints, models, and theories applicable anduseful for modeling a predefined class of problems.

Metamodels are closely related to ontologies. Both are often used todescribe and analyze the relations between concepts. On one hand, anontology is a formal naming and definition of the types, properties, andinterrelationships of the entities that really or fundamentally existfor a particular domain of disclosure. An ontology compartmentalizes thevariables needed for some set of computations and establishes therelationships between the variables. On the other hand, metamodeling canbe considered as an explicit description (constructs and rules) of how adomain-specific model is built, comprising a formalized specification ofthe domain-specific notations. Typically, metamodels are—and shouldalways follow—a strict rule set. A valid metamodel is an ontology, butnot all ontologies are modelled explicitly as metamodels.

FIG. 3 depicts a flowchart of the steps of a matching function,executing within the computing system of FIG. 1, in accordance with anembodiment of the present invention. Matching function 130 operates tomatch system data with known patterns to describe the system based onidentified and matched patterns, in accordance with one embodiment ofthe present invention.

In step 310, matching function 130 receives system data and metadata.System data and metadata are received to classify the system based onthe patterns that are input and available. System data and metadata maybe described as just system data or, merely, data.

In decision 320, matching function 130 determines whether the datamatches the known patterns stored in behavioral model database 150. Asthe system's classification proceeds, analysis routines start matchingpatterns, classifying the system data and metadata into higher levelpatterns. System classification may incorporate a broad array ofavailable algorithms, such as, graph pattern matching, incremental graphpattern matching, and probabilistic semantic matching. If the data doesmatch the known patterns (decision 320, yes branch), matching function130 annotates and stores the data as a pattern model in behavioral modeldatabase 150 (step 330). The annotation of the system data and metadataestablishes a relationship between the system data and metadata and theknown patterns. If the data does not match the known patterns (decision320, no branch), matching function 130 further evaluates the data (step340).

In step 340, further evaluation takes place when it is unclear if thedata matches the known patterns, in addition to if the data does notmatch the known patterns. If the matching is unclear, in someembodiments, the data may be sent to a user for review and manualdecision-making. In other embodiments, matching function 130 may reviewthe data and make a decision internally. If the data clearly does notmatch the known patterns, matching function 130 may suggest newpatterns, suggest modification of existing patterns, and/or requireadditional internal analysis or manual review by a user to properly mapand, eventually, annotate the pattern model.

In decision 350, matching function 130 determines whether new or similarpatterns are detected. If new or similar patterns are not detected(decision 350, no branch), matching function 130 reports non-match (step360). If new or similar patterns are detected (decision 350, yesbranch), matching function 130 creates design patterns (step 370).

In step 370, the design patterns created include solutions to commonproblems in the form of a collection of components connected together ina particular way. A component is a piece of hardware or software thathas an interface. A component model is a definition of the way a set ofcomponents have been connected together. Not all combinations are asgood as others, and different combinations of components achievedifferent results.

In step 380, matching function 130 stores design patterns to arepository, such as behavioral model database 150. In some embodiments,matching function 130 may generate one or more reports that include adescription of a common problem, a solution to that problem, andbenefits and liabilities of using the solution. In other embodiments,matching function 130 may store the information gathered. Still, in someembodiments, generated reports, or information obtained, are stored tobehavioral model database 150, for later use by behavioral model program110, comparison function 140, an organization's IT personnel, and/orusers accessing server 30 through user interface 160 on computing device40.

In step 390, matching function 130 annotates and stores the data as apattern model. In one embodiment, matching function 130 uses the storedannotated data and design patterns stored in behavioral model database150 to generate a pattern model. A collection of design patterns thatrelate to the same topic and link to one another is called a patternlanguage; some pattern languages have a formal metamodel that definesthe types of components and the legal ways that the components can beconnected together.

In some embodiments, the present invention uses a formal model of apattern language to annotate metadata about a deployed set of integratedIT systems. The present invention uses machine reasoning and/orinference to create a pattern based behavioral model of the IT systems.The model is built up in layers, where the higher layers expose theend-to-end behavior of the IT systems that are not visible in thefine-grained detail of traditional monitoring and metamodelingapproaches. In some embodiments, it is possible to annotate the metadatawith the pattern names that refer to the component's behavior.

The pattern language is represented as a set of text descriptions and ametamodel that defines the hierarchies in the pattern language. In someembodiments, the metamodel may be defined in the web ontology language(OWL).

In some embodiments, the pattern language has two types of patternhierarchies. The first type of pattern hierarchy is containmenthierarchy, which is when a solution described in a pattern uses a set ofcomponents configured in a certain way. The components may be patternsor components. When a pattern is used as a component, the pattern has asolution that expands out into another layer of components. The secondtype of pattern hierarchy is patterns organized in groups. The leadpattern in the group is a generalized version of the pattern; theremaining patterns in the group are specializations. When the leadpattern is used in another pattern's solution, any of thespecializations can be substituted (but not vice versa). These twohierarchies in the pattern language allow the present invention toclassify real-world components and group the real-world componentsaccording to pattern definitions.

The present invention is not a one-time process. As new systemcomponents are available, or as existing system components change, thepattern model needs to be evaluated for changes and updates as well.

FIG. 4 depicts a flowchart of the steps of a comparison function,executing within the computing system of FIG. 1, in accordance with anembodiment of the present invention. Comparison function 140 operates tocompare the actual behavior of the system to the pattern basedbehavioral model to monitor for behavior not in line with the patternbased behavioral model, in accordance with one embodiment of the presentinvention.

In step 410, comparison function 140 monitors data processing system.Comparison function 140 monitors the data processing system for behaviornot in line with the pattern model established in FIG. 3. In someembodiments, comparison function 140 uses user interface 160 to monitorthe data processing system. In other embodiments, comparison function140 uses internal means to monitor the data processing system.Comparison function 140 monitors the way various components interactwithin the data processing system. The monitored data can be used toprovide insight to make the data processing system run effectively andefficiently.

In step 420, comparison function 140 receives system information. Themonitored data is captured by comparison function 140, and missing logentries along with errors can be analyzed, both automatically andvisually, to understand the context of the error, the seriousness of theerror, and the consequences of the error. In some embodiments, the datais stored to a repository, such as behavioral model database 150. Inother embodiments, comparison function 140 uses a log file. A log fileis a file that records either the events which happen while an operatingsystem or other software runs, or the personal messages betweendifferent users of a communication software. The act of keeping a log iscalled logging. In some embodiments, the log file resides withinbehavioral model program 110. In other embodiments, the log file resideswithin behavioral model database 150. Still, in some embodiments, thelog file stands alone, as a separate repository.

Some products, such as an information server, have a metadatarepository, describing the systems and components in the IT landscape.An information server is an integrated software platform, consisting ofa set of core functional modules that enable organizations to integratedata from disparate sources and deliver trusted and complete informationat the time it is required and in the format needed. Similar to how anapplication server is a software engine that delivers applications toclient computers, an information server delivers consistent informationto consuming applications, business processes, and portals.

The metadata repository records the type of component and/or system andthe details about the specific deployment of that type of component.This metadata can be populated manually or through various discoverytools. Important, or troublesome, components will have more detailedmetadata than others. The metadata descriptions of the deployedcomponents are linked together to show dependencies. The presentinvention, in some embodiments, may use a metadata repository to receiveinitial information concerning systems being monitored. In someembodiments, the metadata repository resides within behavioral modelprogram 110. In other embodiments, the metadata repository resideswithin behavioral model database 150. Still, in some embodiments, themetadata repository stands alone, as a separate repository.

In step 430, comparison function 140 compares the actual behavior of thesystem to the pattern based behavioral model. The present inventionmatches the actual behavior of a set of integrated IT systems againstthe design intent for these systems, as expressed by a behavioral modelthat is based on the stored design patterns corresponding to componentsof the system and defined from a formal pattern language. The patternbased behavioral model provides insight into how the IT systems aredesigned and integrated together. The pattern based behavioral modelidentifies poor design and flaws in the architecture if there are nomatching patterns (or identified anti-patterns) are found.

In decision 440, comparison function 140 determines whether there areany differences within the comparison. If there are no differenceswithin the comparison (decision 440, no branch), comparison function 140indicates system working properly (step 450). If there are differenceswithin the comparison (decision 440, yes branch), comparison function140 recommends solutions (step 460).

In step 460, comparison function 140 may recommend a wide range ofsolutions, for example, suggest the need for modifications of thepattern model based on emergent properties. Emergent properties arebehaviors that emerge as a consequence of the way components or systemsare connected together over and above the inherent properties of eachindividual component. Emergent properties often relate to non-functionalrequirements, such as, latency, reliability, and flexibility, eachcritical to the successful operation of the end-to-end IT landscape. Insome embodiments, comparison function 140 provides solutions directly tothe IT systems. In other embodiments, comparison function 140 providessolutions to IT administrators who maintain the IT systems.

The pattern based behavioral model provides useful analysis to be usedto drive new projects to improve the information management in the ITsystems. The behavior model has further value in real-time monitoring.The patterns can suggest the most efficient and effective types ofmonitoring to add to the environment to verify the correct operation ofthe pattern. The monitoring data can be mapped to the patterns to ensurethe systems are operating according to the patterns and, if failureoccurs, the significance and potential impact of the failure. Since theformal model of the pattern language enables well-defined rules ofexpected behavior from the systems, a great deal of the solution couldbe automated.

With each pattern layer added, there is an additional understanding ofhow the end-to-end system works. An analysis routine can prompt formissing components and violations of the pattern, repetitions andredundancies that indicate risk of information corruption, oropportunities for information optimization. The recommended solutionscan assist IT systems to run properly, as intended from the initialdesign, for long periods of time.

FIG. 5 depicts computer system 500, which is an example of a system thatincludes components of server 30 and computing device 40. Computersystem 500 includes processors 501, cache 503, memory 502, persistentstorage 505, communications unit 507, input/output (I/O) interface(s)506 and communications fabric 504. Communications fabric 504 providescommunications between cache 503, memory 502, persistent storage 505,communications unit 507, and input/output (I/O) interface(s) 506.Communications fabric 504 can be implemented with any architecturedesigned for passing data and/or control information between processors(such as microprocessors, communications and network processors, etc.),system memory, peripheral devices, and any other hardware componentswithin a system. For example, communications fabric 504 can beimplemented with one or more buses or a crossbar switch.

Memory 502 and persistent storage 505 are computer readable storagemedia. In this embodiment, memory 502 includes random access memory(RAM). In general, memory 502 can include any suitable volatile ornon-volatile computer readable storage media. Cache 503 is a fast memorythat enhances the performance of processors 501 by holding recentlyaccessed data, and data near recently accessed data, from memory 502.

Program instructions and data used to practice embodiments of thepresent invention may be stored in persistent storage 505 and in memory502 for execution by one or more of the respective processors 501 viacache 503. In an embodiment, persistent storage 505 includes a magnetichard disk drive. Alternatively, or in addition to a magnetic hard diskdrive, persistent storage 505 can include a solid state hard drive, asemiconductor storage device, read-only memory (ROM), erasableprogrammable read-only memory (EPROM), flash memory, or any othercomputer readable storage media that is capable of storing programinstructions or digital information.

The media used by persistent storage 505 may also be removable. Forexample, a removable hard drive may be used for persistent storage 505.Other examples include optical and magnetic disks, thumb drives, andsmart cards that are inserted into a drive for transfer onto anothercomputer readable storage medium that is also part of persistent storage505.

Communications unit 507, in these examples, provides for communicationswith other data processing systems or devices. In these examples,communications unit 507 includes one or more network interface cards.Communications unit 507 may provide communications through the use ofeither or both physical and wireless communications links. Programinstructions and data used to practice embodiments of the presentinvention may be downloaded to persistent storage 505 throughcommunications unit 507. Behavioral model program 110, design patternfunction 120, matching function 130, comparison function 140, andbehavioral model database 150 may be downloaded to persistent storage505 of server 30 through communications unit 507 of server 30. Userinterface 160 may be downloaded to persistent storage 505 of computingdevice 40 through communications unit 507 of computing device 40.

I/O interface(s) 506 allows for input and output of data with otherdevices that may be connected to each computer system. For example, I/Ointerface 506 may provide a connection to external devices 508 such as akeyboard, keypad, a touch screen, and/or some other suitable inputdevice. External devices 508 can also include portable computer readablestorage media such as, for example, thumb drives, portable optical ormagnetic disks, and memory cards. Software and data used to practiceembodiments of the present invention, e.g., behavioral model program110, design pattern function 120, matching function 130, comparisonfunction 140, and behavioral model database 150, can be stored on suchportable computer readable storage media and can be loaded ontopersistent storage 505 of server 30 via I/O interface(s) 506 of server30. Software and data used to practice embodiments of the presentinvention, e.g., user interface 160, can be stored on such portablecomputer readable storage media and can be loaded onto persistentstorage 505 of computing device 40 via I/O interface(s) 506 of computingdevice 40. I/O interface(s) 506 also connect to display 509.

Display 509 provides a mechanism to display data to a user and may be,for example, a computer monitor.

The programs described herein are identified based upon the applicationfor which they are implemented in a specific embodiment of theinvention. However, it should be appreciated that any particular programnomenclature herein is used merely for convenience, and thus theinvention should not be limited to use solely in any specificapplication identified and/or implied by such nomenclature.

The present invention may be a system, a method, and/or a computerprogram product. The computer program product may include a computerreadable storage medium (or media) having computer readable programinstructions thereon for causing a processor to carry out aspects of thepresent invention.

The computer readable storage medium can be a tangible device that canretain and store instructions for use by an instruction executiondevice. The computer readable storage medium may be, for example, but isnot limited to, an electronic storage device, a magnetic storage device,an optical storage device, an electromagnetic storage device, asemiconductor storage device, or any suitable combination of theforegoing. A non-exhaustive list of more specific examples of thecomputer readable storage medium includes the following: a portablecomputer diskette, a hard disk, a random access memory (RAM), aread-only memory (ROM), an erasable programmable read-only memory (EPROMor Flash memory), a static random access memory (SRAM), a portablecompact disc read-only memory (CD-ROM), a digital versatile disk (DVD),a memory stick, a floppy disk, a mechanically encoded device such aspunch-cards or raised structures in a groove having instructionsrecorded thereon, and any suitable combination of the foregoing. Acomputer readable storage medium, as used herein, is not to be construedas being transitory signals per se, such as radio waves or other freelypropagating electromagnetic waves, electromagnetic waves propagatingthrough a waveguide or other transmission media (e.g., light pulsespassing through a fiber-optic cable), or electrical signals transmittedthrough a wire.

Computer readable program instructions described herein can bedownloaded to respective computing/processing devices from a computerreadable storage medium or to an external computer or external storagedevice via a network, for example, the Internet, a local area network, awide area network and/or a wireless network. The network may comprisecopper transmission cables, optical transmission fibers, wirelesstransmission, routers, firewalls, switches, gateway computers and/oredge servers. A network adapter card or network interface in eachcomputing/processing device receives computer readable programinstructions from the network and forwards the computer readable programinstructions for storage in a computer readable storage medium withinthe respective computing/processing device.

Computer readable program instructions for carrying out operations ofthe present invention may be assembler instructions,instruction-set-architecture (ISA) instructions, machine instructions,machine dependent instructions, microcode, firmware instructions,state-setting data, or either source code or object code written in anycombination of one or more programming languages, including an objectoriented programming language such as Smalltalk, C++ or the like, andconventional procedural programming languages, such as the “C”programming language or similar programming languages. The computerreadable program instructions may execute entirely on the user'scomputer, partly on the user's computer, as a stand-alone softwarepackage, partly on the user's computer and partly on a remote computeror entirely on the remote computer or server. In the latter scenario,the remote computer may be connected to the user's computer through anytype of network, including a local area network (LAN) or a wide areanetwork (WAN), or the connection may be made to an external computer(for example, through the Internet using an Internet Service Provider).In some embodiments, electronic circuitry including, for example,programmable logic circuitry, field-programmable gate arrays (FPGA), orprogrammable logic arrays (PLA) may execute the computer readableprogram instructions by utilizing state information of the computerreadable program instructions to personalize the electronic circuitry,in order to perform aspects of the present invention.

Aspects of the present invention are described herein with reference toflowchart illustrations and/or block diagrams of methods, apparatus(systems), and computer program products according to embodiments of theinvention. It will be understood that each block of the flowchartillustrations and/or block diagrams, and combinations of blocks in theflowchart illustrations and/or block diagrams, can be implemented bycomputer readable program instructions.

These computer readable program instructions may be provided to aprocessor of a general purpose computer, special purpose computer, orother programmable data processing apparatus to produce a machine, suchthat the instructions, which execute via the processor of the computeror other programmable data processing apparatus, create means forimplementing the functions/acts specified in the flowchart and/or blockdiagram block or blocks. These computer readable program instructionsmay also be stored in a computer readable storage medium that can directa computer, a programmable data processing apparatus, and/or otherdevices to function in a particular manner, such that the computerreadable storage medium having instructions stored therein comprises anarticle of manufacture including instructions which implement aspects ofthe function/act specified in the flowchart and/or block diagram blockor blocks.

The computer readable program instructions may also be loaded onto acomputer, other programmable data processing apparatus, or other deviceto cause a series of operational steps to be performed on the computer,other programmable apparatus or other device to produce a computerimplemented process, such that the instructions which execute on thecomputer, other programmable apparatus, or other device implement thefunctions/acts specified in the flowchart and/or block diagram block orblocks.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods, and computer program products according to variousembodiments of the present invention. In this regard, each block in theflowchart or block diagrams may represent a module, segment, or portionof instructions, which comprises one or more executable instructions forimplementing the specified logical function(s). In some alternativeimplementations, the functions noted in the block may occur out of theorder noted in the figures. For example, two blocks shown in successionmay, in fact, be executed substantially concurrently, or the blocks maysometimes be executed in the reverse order, depending upon thefunctionality involved. It will also be noted that each block of theblock diagrams and/or flowchart illustration, and combinations of blocksin the block diagrams and/or flowchart illustration, can be implementedby special purpose hardware-based systems that perform the specifiedfunctions or acts or carry out combinations of special purpose hardwareand computer instructions.

The descriptions of the various embodiments of the present inventionhave been presented for purposes of illustration, but are not intendedto be exhaustive or limited to the embodiments disclosed. Manymodifications and variations will be apparent to those of ordinary skillin the art without departing from the scope and spirit of the invention.The terminology used herein was chosen to best explain the principles ofthe embodiment, the practical application or technical improvement overtechnologies found in the marketplace, or to enable others of ordinaryskill in the art to understand the embodiments disclosed herein.

What is claimed is:
 1. A computer program product for providing guidanceand management of a data processing system, the computer program productcomprising: one or more computer readable hardware storage media andprogram instructions stored on the one or more computer readablehardware storage media, the program instructions comprising: programinstructions to store at least one design pattern corresponding to aplurality of components of the data processing system, wherein: the atleast one design pattern is represented as a set of text descriptionsand a metamodel; the metamodel is defined in the web ontology language(OWL); and the at least one design pattern describes a problem, asolution to the problem, and benefits and liabilities associated withusing the solution; program instructions to generate a behavioral modelof the data processing system based, at least in part, on the stored atleast one design pattern, wherein: the behavioral model is a patternbased behavioral model of the data processing system; and the behavioralmodel includes annotations to the metadata with pattern names that referto component behavior; program instructions to monitor actual behaviorof the data processing system; program instructions to compare theactual behavior of the data processing system to the behavioral model ofthe data processing system; and program instructions to recommend asolution, based, at least in part, on the comparison wherein thesolution: (i) is defined in terms of a collection of the plurality ofcomponents; and (ii) comprises a suggestion of modifications to thebehavioral model based on properties that emerge as a consequence of howthe plurality of components are connected together.
 2. The computerprogram product of claim 1, wherein program instructions to generate thebehavioral model of the data processing system comprise: programinstructions to receive system data and metadata; program instructionsto match the system data and the metadata to the stored at least onedesign pattern; program instructions to annotate the system data and themetadata to indicate an association with the at least one designpattern; and program instructions to store the annotated system data andthe annotated metadata.
 3. The computer program product of claim 1,wherein program instructions to monitor actual behavior of the dataprocessing system comprise program instructions to receive systeminformation, wherein the system information is information describingbehavior of the data processing system that includes a record of missinglog entries and errors.
 4. The computer program product of claim 1,further comprising: program instructions, stored on the one or morecomputer readable storage media, to perform an action on the at leastone design pattern corresponding to the plurality of components of thedata processing system.
 5. The computer program product of claim 4,wherein the action includes create, modify, merge, and delete.
 6. Thecomputer program product of claim 1, wherein the properties includesystem latency, system reliability, and system flexibility.
 7. Acomputer system for providing guidance and management of a dataprocessing system, the computer system comprising: one or more computerprocessors, one or more computer readable storage media, and programinstructions stored on the computer readable storage media for executionby at least one of the one or more processors, the program instructionscomprising: program instructions to store at least one design patterncorresponding to a plurality of components of the data processingsystem, wherein: the at least one design pattern is represented as a setof text descriptions and a metamodel; the metamodel is defined in theweb ontology language (OWL); and the at least one design patterndescribes a problem, a solution to the problem, and benefits andliabilities associated with using the solution; program instructions togenerate a behavioral model of the data processing system based, atleast in part, on the stored at least one design pattern, wherein: thebehavioral model is a pattern based behavioral model of the dataprocessing system; and the behavioral model includes annotations to themetadata with pattern names that refer to component behavior; programinstructions to monitor actual behavior of the data processing system;program instructions to compare the actual behavior of the dataprocessing system to the behavioral model of the data processing system;and program instructions to recommend a solution, based, at least inpart, on the comparison wherein the solution: (i) is defined in terms ofa collection of the plurality of components; and (ii) comprises asuggestion of modifications to the behavioral model based on propertiesthat emerge as a consequence of how the plurality of components areconnected together.
 8. The computer system of claim 7, wherein programinstructions to generate the behavioral model of the data processingsystem comprise: program instructions to receive system data andmetadata; program instructions to match the system data and the metadatato the stored at least one design pattern; program instructions toannotate the system data and the metadata to indicate an associationwith the at least one design pattern; and program instructions to storethe annotated system data and the annotated metadata.
 9. The computersystem of claim 7, wherein program instructions to monitor actualbehavior of the data processing system comprise program instructions toreceive system information, wherein the system information isinformation describing behavior of the data processing system thatincludes a record of missing log entries and errors.
 10. The computersystem of claim 7, further comprising: program instructions, stored onthe one or more computer readable storage media for execution by atleast one of the one or more processors, to perform an action on the atleast one design pattern corresponding to the plurality of components ofthe data processing system.
 11. The computer system of claim 10, whereinthe action includes create, modify, merge, and delete.